CVE-2020-14292

CVE-2020-14292 affects the COVIDSafe app for Android up to version 1.0.21. The vulnerability stems from unsafe use of the Bluetooth transport option in the GATT connection, which can be coerced to establish a connection over Bluetooth BR/EDR. This allows an attacker to obtain the victim’s public ...